pulumi-snowflake 2.2.0a1751946295__py3-none-any.whl → 2.3.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-snowflake might be problematic. Click here for more details.
- pulumi_snowflake/__init__.py +20 -1
- pulumi_snowflake/_inputs.py +17236 -16797
- pulumi_snowflake/account.py +252 -253
- pulumi_snowflake/account_authentication_policy_attachment.py +18 -19
- pulumi_snowflake/account_parameter.py +35 -36
- pulumi_snowflake/account_password_policy_attachment.py +18 -19
- pulumi_snowflake/account_role.py +42 -43
- pulumi_snowflake/alert.py +149 -150
- pulumi_snowflake/api_authentication_integration_with_authorization_code_grant.py +197 -198
- pulumi_snowflake/api_authentication_integration_with_client_credentials.py +180 -181
- pulumi_snowflake/api_authentication_integration_with_jwt_bearer.py +193 -194
- pulumi_snowflake/api_integration.py +251 -252
- pulumi_snowflake/authentication_policy.py +167 -168
- pulumi_snowflake/compute_pool.py +167 -168
- pulumi_snowflake/config/__init__.py +1 -1
- pulumi_snowflake/config/__init__.pyi +1 -2
- pulumi_snowflake/config/outputs.py +21 -22
- pulumi_snowflake/config/vars.py +43 -44
- pulumi_snowflake/cortex_search_service.py +191 -192
- pulumi_snowflake/current_account.py +2096 -2097
- pulumi_snowflake/current_organization_account.py +5863 -0
- pulumi_snowflake/database.py +353 -354
- pulumi_snowflake/database_role.py +63 -64
- pulumi_snowflake/dynamic_table.py +274 -275
- pulumi_snowflake/email_notification_integration.py +70 -71
- pulumi_snowflake/execute.py +61 -62
- pulumi_snowflake/external_function.py +280 -281
- pulumi_snowflake/external_oauth_integration.py +288 -289
- pulumi_snowflake/external_table.py +246 -247
- pulumi_snowflake/external_volume.py +68 -69
- pulumi_snowflake/failover_group.py +135 -136
- pulumi_snowflake/file_format.py +622 -623
- pulumi_snowflake/function_java.py +320 -321
- pulumi_snowflake/function_javascript.py +243 -244
- pulumi_snowflake/function_python.py +334 -335
- pulumi_snowflake/function_scala.py +320 -321
- pulumi_snowflake/function_sql.py +226 -227
- pulumi_snowflake/get_account_roles.py +16 -17
- pulumi_snowflake/get_accounts.py +16 -17
- pulumi_snowflake/get_alerts.py +22 -23
- pulumi_snowflake/get_compute_pools.py +23 -24
- pulumi_snowflake/get_connections.py +10 -11
- pulumi_snowflake/get_cortex_search_services.py +18 -19
- pulumi_snowflake/get_current_account.py +9 -10
- pulumi_snowflake/get_current_role.py +5 -6
- pulumi_snowflake/get_database.py +25 -26
- pulumi_snowflake/get_database_role.py +19 -20
- pulumi_snowflake/get_database_roles.py +17 -18
- pulumi_snowflake/get_databases.py +29 -30
- pulumi_snowflake/get_dynamic_tables.py +13 -14
- pulumi_snowflake/get_external_functions.py +16 -17
- pulumi_snowflake/get_external_tables.py +16 -17
- pulumi_snowflake/get_failover_groups.py +10 -11
- pulumi_snowflake/get_file_formats.py +16 -17
- pulumi_snowflake/get_functions.py +16 -17
- pulumi_snowflake/get_git_repositories.py +18 -19
- pulumi_snowflake/get_grants.py +9 -10
- pulumi_snowflake/get_image_repositories.py +11 -12
- pulumi_snowflake/get_masking_policies.py +18 -19
- pulumi_snowflake/get_materialized_views.py +16 -17
- pulumi_snowflake/get_network_policies.py +16 -17
- pulumi_snowflake/get_parameters.py +34 -35
- pulumi_snowflake/get_pipes.py +16 -17
- pulumi_snowflake/get_procedures.py +16 -17
- pulumi_snowflake/get_resource_monitors.py +10 -11
- pulumi_snowflake/get_row_access_policies.py +18 -19
- pulumi_snowflake/get_schemas.py +30 -31
- pulumi_snowflake/get_secrets.py +17 -18
- pulumi_snowflake/get_security_integrations.py +16 -17
- pulumi_snowflake/get_sequences.py +16 -17
- pulumi_snowflake/get_services.py +30 -31
- pulumi_snowflake/get_shares.py +10 -11
- pulumi_snowflake/get_stages.py +16 -17
- pulumi_snowflake/get_storage_integrations.py +4 -5
- pulumi_snowflake/get_streamlits.py +18 -19
- pulumi_snowflake/get_streams.py +24 -25
- pulumi_snowflake/get_system_generate_scim_access_token.py +11 -12
- pulumi_snowflake/get_system_get_aws_sns_iam_policy.py +11 -12
- pulumi_snowflake/get_system_get_private_link_config.py +21 -22
- pulumi_snowflake/get_system_get_snowflake_platform_info.py +7 -8
- pulumi_snowflake/get_tables.py +24 -25
- pulumi_snowflake/get_tags.py +11 -12
- pulumi_snowflake/get_tasks.py +30 -31
- pulumi_snowflake/get_user_programmatic_access_tokens.py +113 -0
- pulumi_snowflake/get_users.py +29 -30
- pulumi_snowflake/get_views.py +24 -25
- pulumi_snowflake/get_warehouses.py +22 -23
- pulumi_snowflake/git_repository.py +133 -134
- pulumi_snowflake/grant_account_role.py +52 -53
- pulumi_snowflake/grant_application_role.py +52 -53
- pulumi_snowflake/grant_database_role.py +69 -70
- pulumi_snowflake/grant_ownership.py +55 -56
- pulumi_snowflake/grant_privileges_to_account_role.py +125 -126
- pulumi_snowflake/grant_privileges_to_database_role.py +122 -123
- pulumi_snowflake/grant_privileges_to_share.py +154 -155
- pulumi_snowflake/image_repository.py +80 -81
- pulumi_snowflake/job_service.py +148 -149
- pulumi_snowflake/legacy_service_user.py +1269 -1270
- pulumi_snowflake/managed_account.py +140 -141
- pulumi_snowflake/masking_policy.py +136 -137
- pulumi_snowflake/materialized_view.py +149 -150
- pulumi_snowflake/network_policy.py +116 -117
- pulumi_snowflake/network_policy_attachment.py +52 -53
- pulumi_snowflake/network_rule.py +129 -130
- pulumi_snowflake/notification_integration.py +298 -299
- pulumi_snowflake/oauth_integration_for_custom_clients.py +263 -264
- pulumi_snowflake/oauth_integration_for_partner_applications.py +169 -170
- pulumi_snowflake/object_parameter.py +72 -73
- pulumi_snowflake/outputs.py +15957 -15511
- pulumi_snowflake/password_policy.py +299 -300
- pulumi_snowflake/pipe.py +181 -182
- pulumi_snowflake/primary_connection.py +70 -71
- pulumi_snowflake/procedure_java.py +341 -342
- pulumi_snowflake/procedure_javascript.py +247 -248
- pulumi_snowflake/procedure_python.py +338 -339
- pulumi_snowflake/procedure_scala.py +341 -342
- pulumi_snowflake/procedure_sql.py +247 -248
- pulumi_snowflake/provider.py +377 -378
- pulumi_snowflake/pulumi-plugin.json +1 -1
- pulumi_snowflake/resource_monitor.py +165 -166
- pulumi_snowflake/row_access_policy.py +102 -103
- pulumi_snowflake/saml2_integration.py +303 -304
- pulumi_snowflake/schema.py +390 -391
- pulumi_snowflake/scim_integration.py +133 -134
- pulumi_snowflake/secondary_connection.py +72 -73
- pulumi_snowflake/secondary_database.py +350 -351
- pulumi_snowflake/secret_with_authorization_code_grant.py +138 -139
- pulumi_snowflake/secret_with_basic_authentication.py +121 -122
- pulumi_snowflake/secret_with_client_credentials.py +125 -126
- pulumi_snowflake/secret_with_generic_string.py +104 -105
- pulumi_snowflake/sequence.py +121 -122
- pulumi_snowflake/service.py +233 -234
- pulumi_snowflake/service_user.py +1239 -1240
- pulumi_snowflake/share.py +61 -62
- pulumi_snowflake/shared_database.py +299 -300
- pulumi_snowflake/stage.py +234 -235
- pulumi_snowflake/storage_integration.py +230 -231
- pulumi_snowflake/stream_on_directory_table.py +128 -129
- pulumi_snowflake/stream_on_external_table.py +151 -152
- pulumi_snowflake/stream_on_table.py +164 -165
- pulumi_snowflake/stream_on_view.py +164 -165
- pulumi_snowflake/streamlit.py +184 -185
- pulumi_snowflake/table.py +147 -148
- pulumi_snowflake/table_column_masking_policy_application.py +52 -53
- pulumi_snowflake/table_constraint.py +191 -192
- pulumi_snowflake/tag.py +114 -115
- pulumi_snowflake/tag_association.py +86 -87
- pulumi_snowflake/task.py +1224 -1225
- pulumi_snowflake/user.py +1346 -1347
- pulumi_snowflake/user_authentication_policy_attachment.py +35 -36
- pulumi_snowflake/user_password_policy_attachment.py +35 -36
- pulumi_snowflake/user_programmatic_access_token.py +598 -0
- pulumi_snowflake/user_public_keys.py +52 -53
- pulumi_snowflake/view.py +187 -188
- pulumi_snowflake/warehouse.py +286 -287
- {pulumi_snowflake-2.2.0a1751946295.dist-info → pulumi_snowflake-2.3.0.dist-info}/METADATA +1 -1
- pulumi_snowflake-2.3.0.dist-info/RECORD +161 -0
- pulumi_snowflake-2.2.0a1751946295.dist-info/RECORD +0 -158
- {pulumi_snowflake-2.2.0a1751946295.dist-info → pulumi_snowflake-2.3.0.dist-info}/WHEEL +0 -0
- {pulumi_snowflake-2.2.0a1751946295.dist-info → pulumi_snowflake-2.3.0.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -22,40 +21,40 @@ __all__ = ['ExternalOauthIntegrationArgs', 'ExternalOauthIntegration']
|
|
|
22
21
|
@pulumi.input_type
|
|
23
22
|
class ExternalOauthIntegrationArgs:
|
|
24
23
|
def __init__(__self__, *,
|
|
25
|
-
enabled: pulumi.Input[
|
|
26
|
-
external_oauth_issuer: pulumi.Input[
|
|
27
|
-
external_oauth_snowflake_user_mapping_attribute: pulumi.Input[
|
|
28
|
-
external_oauth_token_user_mapping_claims: pulumi.Input[Sequence[pulumi.Input[
|
|
29
|
-
external_oauth_type: pulumi.Input[
|
|
30
|
-
comment: Optional[pulumi.Input[
|
|
31
|
-
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
32
|
-
external_oauth_any_role_mode: Optional[pulumi.Input[
|
|
33
|
-
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
34
|
-
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
35
|
-
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
36
|
-
external_oauth_rsa_public_key: Optional[pulumi.Input[
|
|
37
|
-
external_oauth_rsa_public_key2: Optional[pulumi.Input[
|
|
38
|
-
external_oauth_scope_delimiter: Optional[pulumi.Input[
|
|
39
|
-
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[
|
|
40
|
-
name: Optional[pulumi.Input[
|
|
24
|
+
enabled: pulumi.Input[_builtins.bool],
|
|
25
|
+
external_oauth_issuer: pulumi.Input[_builtins.str],
|
|
26
|
+
external_oauth_snowflake_user_mapping_attribute: pulumi.Input[_builtins.str],
|
|
27
|
+
external_oauth_token_user_mapping_claims: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]],
|
|
28
|
+
external_oauth_type: pulumi.Input[_builtins.str],
|
|
29
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
31
|
+
external_oauth_any_role_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
33
|
+
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
34
|
+
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
35
|
+
external_oauth_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
external_oauth_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
external_oauth_scope_delimiter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
name: Optional[pulumi.Input[_builtins.str]] = None):
|
|
41
40
|
"""
|
|
42
41
|
The set of arguments for constructing a ExternalOauthIntegration resource.
|
|
43
|
-
:param pulumi.Input[
|
|
44
|
-
:param pulumi.Input[
|
|
45
|
-
:param pulumi.Input[
|
|
46
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
52
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
53
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
-
:param pulumi.Input[
|
|
56
|
-
:param pulumi.Input[
|
|
57
|
-
:param pulumi.Input[
|
|
58
|
-
:param pulumi.Input[
|
|
42
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
|
|
43
|
+
:param pulumi.Input[_builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
|
|
44
|
+
:param pulumi.Input[_builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
45
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
46
|
+
:param pulumi.Input[_builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
47
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
48
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
49
|
+
:param pulumi.Input[_builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
50
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
51
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
52
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
53
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
54
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
55
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
|
|
56
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
57
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
59
58
|
"""
|
|
60
59
|
pulumi.set(__self__, "enabled", enabled)
|
|
61
60
|
pulumi.set(__self__, "external_oauth_issuer", external_oauth_issuer)
|
|
@@ -85,242 +84,242 @@ class ExternalOauthIntegrationArgs:
|
|
|
85
84
|
if name is not None:
|
|
86
85
|
pulumi.set(__self__, "name", name)
|
|
87
86
|
|
|
88
|
-
@property
|
|
87
|
+
@_builtins.property
|
|
89
88
|
@pulumi.getter
|
|
90
|
-
def enabled(self) -> pulumi.Input[
|
|
89
|
+
def enabled(self) -> pulumi.Input[_builtins.bool]:
|
|
91
90
|
"""
|
|
92
91
|
Specifies whether to initiate operation of the integration or suspend it.
|
|
93
92
|
"""
|
|
94
93
|
return pulumi.get(self, "enabled")
|
|
95
94
|
|
|
96
95
|
@enabled.setter
|
|
97
|
-
def enabled(self, value: pulumi.Input[
|
|
96
|
+
def enabled(self, value: pulumi.Input[_builtins.bool]):
|
|
98
97
|
pulumi.set(self, "enabled", value)
|
|
99
98
|
|
|
100
|
-
@property
|
|
99
|
+
@_builtins.property
|
|
101
100
|
@pulumi.getter(name="externalOauthIssuer")
|
|
102
|
-
def external_oauth_issuer(self) -> pulumi.Input[
|
|
101
|
+
def external_oauth_issuer(self) -> pulumi.Input[_builtins.str]:
|
|
103
102
|
"""
|
|
104
103
|
Specifies the URL to define the OAuth 2.0 authorization server.
|
|
105
104
|
"""
|
|
106
105
|
return pulumi.get(self, "external_oauth_issuer")
|
|
107
106
|
|
|
108
107
|
@external_oauth_issuer.setter
|
|
109
|
-
def external_oauth_issuer(self, value: pulumi.Input[
|
|
108
|
+
def external_oauth_issuer(self, value: pulumi.Input[_builtins.str]):
|
|
110
109
|
pulumi.set(self, "external_oauth_issuer", value)
|
|
111
110
|
|
|
112
|
-
@property
|
|
111
|
+
@_builtins.property
|
|
113
112
|
@pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
|
|
114
|
-
def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Input[
|
|
113
|
+
def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Input[_builtins.str]:
|
|
115
114
|
"""
|
|
116
115
|
Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
117
116
|
"""
|
|
118
117
|
return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
|
|
119
118
|
|
|
120
119
|
@external_oauth_snowflake_user_mapping_attribute.setter
|
|
121
|
-
def external_oauth_snowflake_user_mapping_attribute(self, value: pulumi.Input[
|
|
120
|
+
def external_oauth_snowflake_user_mapping_attribute(self, value: pulumi.Input[_builtins.str]):
|
|
122
121
|
pulumi.set(self, "external_oauth_snowflake_user_mapping_attribute", value)
|
|
123
122
|
|
|
124
|
-
@property
|
|
123
|
+
@_builtins.property
|
|
125
124
|
@pulumi.getter(name="externalOauthTokenUserMappingClaims")
|
|
126
|
-
def external_oauth_token_user_mapping_claims(self) -> pulumi.Input[Sequence[pulumi.Input[
|
|
125
|
+
def external_oauth_token_user_mapping_claims(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
|
|
127
126
|
"""
|
|
128
127
|
Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
129
128
|
"""
|
|
130
129
|
return pulumi.get(self, "external_oauth_token_user_mapping_claims")
|
|
131
130
|
|
|
132
131
|
@external_oauth_token_user_mapping_claims.setter
|
|
133
|
-
def external_oauth_token_user_mapping_claims(self, value: pulumi.Input[Sequence[pulumi.Input[
|
|
132
|
+
def external_oauth_token_user_mapping_claims(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
|
|
134
133
|
pulumi.set(self, "external_oauth_token_user_mapping_claims", value)
|
|
135
134
|
|
|
136
|
-
@property
|
|
135
|
+
@_builtins.property
|
|
137
136
|
@pulumi.getter(name="externalOauthType")
|
|
138
|
-
def external_oauth_type(self) -> pulumi.Input[
|
|
137
|
+
def external_oauth_type(self) -> pulumi.Input[_builtins.str]:
|
|
139
138
|
"""
|
|
140
139
|
Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
141
140
|
"""
|
|
142
141
|
return pulumi.get(self, "external_oauth_type")
|
|
143
142
|
|
|
144
143
|
@external_oauth_type.setter
|
|
145
|
-
def external_oauth_type(self, value: pulumi.Input[
|
|
144
|
+
def external_oauth_type(self, value: pulumi.Input[_builtins.str]):
|
|
146
145
|
pulumi.set(self, "external_oauth_type", value)
|
|
147
146
|
|
|
148
|
-
@property
|
|
147
|
+
@_builtins.property
|
|
149
148
|
@pulumi.getter
|
|
150
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
149
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
151
150
|
"""
|
|
152
151
|
Specifies a comment for the OAuth integration.
|
|
153
152
|
"""
|
|
154
153
|
return pulumi.get(self, "comment")
|
|
155
154
|
|
|
156
155
|
@comment.setter
|
|
157
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
156
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
158
157
|
pulumi.set(self, "comment", value)
|
|
159
158
|
|
|
160
|
-
@property
|
|
159
|
+
@_builtins.property
|
|
161
160
|
@pulumi.getter(name="externalOauthAllowedRolesLists")
|
|
162
|
-
def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
161
|
+
def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
163
162
|
"""
|
|
164
163
|
Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
165
164
|
"""
|
|
166
165
|
return pulumi.get(self, "external_oauth_allowed_roles_lists")
|
|
167
166
|
|
|
168
167
|
@external_oauth_allowed_roles_lists.setter
|
|
169
|
-
def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
168
|
+
def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
170
169
|
pulumi.set(self, "external_oauth_allowed_roles_lists", value)
|
|
171
170
|
|
|
172
|
-
@property
|
|
171
|
+
@_builtins.property
|
|
173
172
|
@pulumi.getter(name="externalOauthAnyRoleMode")
|
|
174
|
-
def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[
|
|
173
|
+
def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
175
174
|
"""
|
|
176
175
|
Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
177
176
|
"""
|
|
178
177
|
return pulumi.get(self, "external_oauth_any_role_mode")
|
|
179
178
|
|
|
180
179
|
@external_oauth_any_role_mode.setter
|
|
181
|
-
def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[
|
|
180
|
+
def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
182
181
|
pulumi.set(self, "external_oauth_any_role_mode", value)
|
|
183
182
|
|
|
184
|
-
@property
|
|
183
|
+
@_builtins.property
|
|
185
184
|
@pulumi.getter(name="externalOauthAudienceLists")
|
|
186
|
-
def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
185
|
+
def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
187
186
|
"""
|
|
188
187
|
Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
189
188
|
"""
|
|
190
189
|
return pulumi.get(self, "external_oauth_audience_lists")
|
|
191
190
|
|
|
192
191
|
@external_oauth_audience_lists.setter
|
|
193
|
-
def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
192
|
+
def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
194
193
|
pulumi.set(self, "external_oauth_audience_lists", value)
|
|
195
194
|
|
|
196
|
-
@property
|
|
195
|
+
@_builtins.property
|
|
197
196
|
@pulumi.getter(name="externalOauthBlockedRolesLists")
|
|
198
|
-
def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
197
|
+
def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
199
198
|
"""
|
|
200
199
|
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
201
200
|
"""
|
|
202
201
|
return pulumi.get(self, "external_oauth_blocked_roles_lists")
|
|
203
202
|
|
|
204
203
|
@external_oauth_blocked_roles_lists.setter
|
|
205
|
-
def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
204
|
+
def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
206
205
|
pulumi.set(self, "external_oauth_blocked_roles_lists", value)
|
|
207
206
|
|
|
208
|
-
@property
|
|
207
|
+
@_builtins.property
|
|
209
208
|
@pulumi.getter(name="externalOauthJwsKeysUrls")
|
|
210
|
-
def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
209
|
+
def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
211
210
|
"""
|
|
212
211
|
Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
213
212
|
"""
|
|
214
213
|
return pulumi.get(self, "external_oauth_jws_keys_urls")
|
|
215
214
|
|
|
216
215
|
@external_oauth_jws_keys_urls.setter
|
|
217
|
-
def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
216
|
+
def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
218
217
|
pulumi.set(self, "external_oauth_jws_keys_urls", value)
|
|
219
218
|
|
|
220
|
-
@property
|
|
219
|
+
@_builtins.property
|
|
221
220
|
@pulumi.getter(name="externalOauthRsaPublicKey")
|
|
222
|
-
def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[
|
|
221
|
+
def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
223
222
|
"""
|
|
224
223
|
Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
225
224
|
"""
|
|
226
225
|
return pulumi.get(self, "external_oauth_rsa_public_key")
|
|
227
226
|
|
|
228
227
|
@external_oauth_rsa_public_key.setter
|
|
229
|
-
def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[
|
|
228
|
+
def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
230
229
|
pulumi.set(self, "external_oauth_rsa_public_key", value)
|
|
231
230
|
|
|
232
|
-
@property
|
|
231
|
+
@_builtins.property
|
|
233
232
|
@pulumi.getter(name="externalOauthRsaPublicKey2")
|
|
234
|
-
def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[
|
|
233
|
+
def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
235
234
|
"""
|
|
236
235
|
Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
237
236
|
"""
|
|
238
237
|
return pulumi.get(self, "external_oauth_rsa_public_key2")
|
|
239
238
|
|
|
240
239
|
@external_oauth_rsa_public_key2.setter
|
|
241
|
-
def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[
|
|
240
|
+
def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
242
241
|
pulumi.set(self, "external_oauth_rsa_public_key2", value)
|
|
243
242
|
|
|
244
|
-
@property
|
|
243
|
+
@_builtins.property
|
|
245
244
|
@pulumi.getter(name="externalOauthScopeDelimiter")
|
|
246
|
-
def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[
|
|
245
|
+
def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
247
246
|
"""
|
|
248
247
|
Specifies the scope delimiter in the authorization token.
|
|
249
248
|
"""
|
|
250
249
|
return pulumi.get(self, "external_oauth_scope_delimiter")
|
|
251
250
|
|
|
252
251
|
@external_oauth_scope_delimiter.setter
|
|
253
|
-
def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[
|
|
252
|
+
def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
254
253
|
pulumi.set(self, "external_oauth_scope_delimiter", value)
|
|
255
254
|
|
|
256
|
-
@property
|
|
255
|
+
@_builtins.property
|
|
257
256
|
@pulumi.getter(name="externalOauthScopeMappingAttribute")
|
|
258
|
-
def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[
|
|
257
|
+
def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
259
258
|
"""
|
|
260
259
|
Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
261
260
|
"""
|
|
262
261
|
return pulumi.get(self, "external_oauth_scope_mapping_attribute")
|
|
263
262
|
|
|
264
263
|
@external_oauth_scope_mapping_attribute.setter
|
|
265
|
-
def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[
|
|
264
|
+
def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
266
265
|
pulumi.set(self, "external_oauth_scope_mapping_attribute", value)
|
|
267
266
|
|
|
268
|
-
@property
|
|
267
|
+
@_builtins.property
|
|
269
268
|
@pulumi.getter
|
|
270
|
-
def name(self) -> Optional[pulumi.Input[
|
|
269
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
271
270
|
"""
|
|
272
271
|
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
273
272
|
"""
|
|
274
273
|
return pulumi.get(self, "name")
|
|
275
274
|
|
|
276
275
|
@name.setter
|
|
277
|
-
def name(self, value: Optional[pulumi.Input[
|
|
276
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
278
277
|
pulumi.set(self, "name", value)
|
|
279
278
|
|
|
280
279
|
|
|
281
280
|
@pulumi.input_type
|
|
282
281
|
class _ExternalOauthIntegrationState:
|
|
283
282
|
def __init__(__self__, *,
|
|
284
|
-
comment: Optional[pulumi.Input[
|
|
283
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
285
284
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]]] = None,
|
|
286
|
-
enabled: Optional[pulumi.Input[
|
|
287
|
-
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
288
|
-
external_oauth_any_role_mode: Optional[pulumi.Input[
|
|
289
|
-
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
290
|
-
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
291
|
-
external_oauth_issuer: Optional[pulumi.Input[
|
|
292
|
-
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
293
|
-
external_oauth_rsa_public_key: Optional[pulumi.Input[
|
|
294
|
-
external_oauth_rsa_public_key2: Optional[pulumi.Input[
|
|
295
|
-
external_oauth_scope_delimiter: Optional[pulumi.Input[
|
|
296
|
-
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[
|
|
297
|
-
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[
|
|
298
|
-
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
299
|
-
external_oauth_type: Optional[pulumi.Input[
|
|
300
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
301
|
-
name: Optional[pulumi.Input[
|
|
285
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
286
|
+
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
287
|
+
external_oauth_any_role_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
288
|
+
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
289
|
+
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
290
|
+
external_oauth_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
291
|
+
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
292
|
+
external_oauth_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
293
|
+
external_oauth_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
294
|
+
external_oauth_scope_delimiter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
295
|
+
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
296
|
+
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
297
|
+
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
298
|
+
external_oauth_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
299
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
300
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
302
301
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]] = None,
|
|
303
302
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]]] = None):
|
|
304
303
|
"""
|
|
305
304
|
Input properties used for looking up and filtering ExternalOauthIntegration resources.
|
|
306
|
-
:param pulumi.Input[
|
|
305
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
307
306
|
:param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
308
|
-
:param pulumi.Input[
|
|
309
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
310
|
-
:param pulumi.Input[
|
|
311
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
312
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
313
|
-
:param pulumi.Input[
|
|
314
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
315
|
-
:param pulumi.Input[
|
|
316
|
-
:param pulumi.Input[
|
|
317
|
-
:param pulumi.Input[
|
|
318
|
-
:param pulumi.Input[
|
|
319
|
-
:param pulumi.Input[
|
|
320
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
321
|
-
:param pulumi.Input[
|
|
322
|
-
:param pulumi.Input[
|
|
323
|
-
:param pulumi.Input[
|
|
307
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
|
|
308
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
309
|
+
:param pulumi.Input[_builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
310
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
311
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
312
|
+
:param pulumi.Input[_builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
|
|
313
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
314
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
315
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
316
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
|
|
317
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
318
|
+
:param pulumi.Input[_builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
319
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
320
|
+
:param pulumi.Input[_builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
321
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
322
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
324
323
|
:param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]] related_parameters: Parameters related to this security integration.
|
|
325
324
|
:param pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
|
|
326
325
|
"""
|
|
@@ -365,19 +364,19 @@ class _ExternalOauthIntegrationState:
|
|
|
365
364
|
if show_outputs is not None:
|
|
366
365
|
pulumi.set(__self__, "show_outputs", show_outputs)
|
|
367
366
|
|
|
368
|
-
@property
|
|
367
|
+
@_builtins.property
|
|
369
368
|
@pulumi.getter
|
|
370
|
-
def comment(self) -> Optional[pulumi.Input[
|
|
369
|
+
def comment(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
371
370
|
"""
|
|
372
371
|
Specifies a comment for the OAuth integration.
|
|
373
372
|
"""
|
|
374
373
|
return pulumi.get(self, "comment")
|
|
375
374
|
|
|
376
375
|
@comment.setter
|
|
377
|
-
def comment(self, value: Optional[pulumi.Input[
|
|
376
|
+
def comment(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
378
377
|
pulumi.set(self, "comment", value)
|
|
379
378
|
|
|
380
|
-
@property
|
|
379
|
+
@_builtins.property
|
|
381
380
|
@pulumi.getter(name="describeOutputs")
|
|
382
381
|
def describe_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]]]:
|
|
383
382
|
"""
|
|
@@ -389,199 +388,199 @@ class _ExternalOauthIntegrationState:
|
|
|
389
388
|
def describe_outputs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationDescribeOutputArgs']]]]):
|
|
390
389
|
pulumi.set(self, "describe_outputs", value)
|
|
391
390
|
|
|
392
|
-
@property
|
|
391
|
+
@_builtins.property
|
|
393
392
|
@pulumi.getter
|
|
394
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
393
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
395
394
|
"""
|
|
396
395
|
Specifies whether to initiate operation of the integration or suspend it.
|
|
397
396
|
"""
|
|
398
397
|
return pulumi.get(self, "enabled")
|
|
399
398
|
|
|
400
399
|
@enabled.setter
|
|
401
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
400
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
402
401
|
pulumi.set(self, "enabled", value)
|
|
403
402
|
|
|
404
|
-
@property
|
|
403
|
+
@_builtins.property
|
|
405
404
|
@pulumi.getter(name="externalOauthAllowedRolesLists")
|
|
406
|
-
def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
405
|
+
def external_oauth_allowed_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
407
406
|
"""
|
|
408
407
|
Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
409
408
|
"""
|
|
410
409
|
return pulumi.get(self, "external_oauth_allowed_roles_lists")
|
|
411
410
|
|
|
412
411
|
@external_oauth_allowed_roles_lists.setter
|
|
413
|
-
def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
412
|
+
def external_oauth_allowed_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
414
413
|
pulumi.set(self, "external_oauth_allowed_roles_lists", value)
|
|
415
414
|
|
|
416
|
-
@property
|
|
415
|
+
@_builtins.property
|
|
417
416
|
@pulumi.getter(name="externalOauthAnyRoleMode")
|
|
418
|
-
def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[
|
|
417
|
+
def external_oauth_any_role_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
419
418
|
"""
|
|
420
419
|
Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
421
420
|
"""
|
|
422
421
|
return pulumi.get(self, "external_oauth_any_role_mode")
|
|
423
422
|
|
|
424
423
|
@external_oauth_any_role_mode.setter
|
|
425
|
-
def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[
|
|
424
|
+
def external_oauth_any_role_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
426
425
|
pulumi.set(self, "external_oauth_any_role_mode", value)
|
|
427
426
|
|
|
428
|
-
@property
|
|
427
|
+
@_builtins.property
|
|
429
428
|
@pulumi.getter(name="externalOauthAudienceLists")
|
|
430
|
-
def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
429
|
+
def external_oauth_audience_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
431
430
|
"""
|
|
432
431
|
Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
433
432
|
"""
|
|
434
433
|
return pulumi.get(self, "external_oauth_audience_lists")
|
|
435
434
|
|
|
436
435
|
@external_oauth_audience_lists.setter
|
|
437
|
-
def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
436
|
+
def external_oauth_audience_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
438
437
|
pulumi.set(self, "external_oauth_audience_lists", value)
|
|
439
438
|
|
|
440
|
-
@property
|
|
439
|
+
@_builtins.property
|
|
441
440
|
@pulumi.getter(name="externalOauthBlockedRolesLists")
|
|
442
|
-
def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
441
|
+
def external_oauth_blocked_roles_lists(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
443
442
|
"""
|
|
444
443
|
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
445
444
|
"""
|
|
446
445
|
return pulumi.get(self, "external_oauth_blocked_roles_lists")
|
|
447
446
|
|
|
448
447
|
@external_oauth_blocked_roles_lists.setter
|
|
449
|
-
def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
448
|
+
def external_oauth_blocked_roles_lists(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
450
449
|
pulumi.set(self, "external_oauth_blocked_roles_lists", value)
|
|
451
450
|
|
|
452
|
-
@property
|
|
451
|
+
@_builtins.property
|
|
453
452
|
@pulumi.getter(name="externalOauthIssuer")
|
|
454
|
-
def external_oauth_issuer(self) -> Optional[pulumi.Input[
|
|
453
|
+
def external_oauth_issuer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
455
454
|
"""
|
|
456
455
|
Specifies the URL to define the OAuth 2.0 authorization server.
|
|
457
456
|
"""
|
|
458
457
|
return pulumi.get(self, "external_oauth_issuer")
|
|
459
458
|
|
|
460
459
|
@external_oauth_issuer.setter
|
|
461
|
-
def external_oauth_issuer(self, value: Optional[pulumi.Input[
|
|
460
|
+
def external_oauth_issuer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
462
461
|
pulumi.set(self, "external_oauth_issuer", value)
|
|
463
462
|
|
|
464
|
-
@property
|
|
463
|
+
@_builtins.property
|
|
465
464
|
@pulumi.getter(name="externalOauthJwsKeysUrls")
|
|
466
|
-
def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
465
|
+
def external_oauth_jws_keys_urls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
467
466
|
"""
|
|
468
467
|
Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
469
468
|
"""
|
|
470
469
|
return pulumi.get(self, "external_oauth_jws_keys_urls")
|
|
471
470
|
|
|
472
471
|
@external_oauth_jws_keys_urls.setter
|
|
473
|
-
def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
472
|
+
def external_oauth_jws_keys_urls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
474
473
|
pulumi.set(self, "external_oauth_jws_keys_urls", value)
|
|
475
474
|
|
|
476
|
-
@property
|
|
475
|
+
@_builtins.property
|
|
477
476
|
@pulumi.getter(name="externalOauthRsaPublicKey")
|
|
478
|
-
def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[
|
|
477
|
+
def external_oauth_rsa_public_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
479
478
|
"""
|
|
480
479
|
Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
481
480
|
"""
|
|
482
481
|
return pulumi.get(self, "external_oauth_rsa_public_key")
|
|
483
482
|
|
|
484
483
|
@external_oauth_rsa_public_key.setter
|
|
485
|
-
def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[
|
|
484
|
+
def external_oauth_rsa_public_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
486
485
|
pulumi.set(self, "external_oauth_rsa_public_key", value)
|
|
487
486
|
|
|
488
|
-
@property
|
|
487
|
+
@_builtins.property
|
|
489
488
|
@pulumi.getter(name="externalOauthRsaPublicKey2")
|
|
490
|
-
def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[
|
|
489
|
+
def external_oauth_rsa_public_key2(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
491
490
|
"""
|
|
492
491
|
Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
493
492
|
"""
|
|
494
493
|
return pulumi.get(self, "external_oauth_rsa_public_key2")
|
|
495
494
|
|
|
496
495
|
@external_oauth_rsa_public_key2.setter
|
|
497
|
-
def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[
|
|
496
|
+
def external_oauth_rsa_public_key2(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
498
497
|
pulumi.set(self, "external_oauth_rsa_public_key2", value)
|
|
499
498
|
|
|
500
|
-
@property
|
|
499
|
+
@_builtins.property
|
|
501
500
|
@pulumi.getter(name="externalOauthScopeDelimiter")
|
|
502
|
-
def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[
|
|
501
|
+
def external_oauth_scope_delimiter(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
503
502
|
"""
|
|
504
503
|
Specifies the scope delimiter in the authorization token.
|
|
505
504
|
"""
|
|
506
505
|
return pulumi.get(self, "external_oauth_scope_delimiter")
|
|
507
506
|
|
|
508
507
|
@external_oauth_scope_delimiter.setter
|
|
509
|
-
def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[
|
|
508
|
+
def external_oauth_scope_delimiter(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
510
509
|
pulumi.set(self, "external_oauth_scope_delimiter", value)
|
|
511
510
|
|
|
512
|
-
@property
|
|
511
|
+
@_builtins.property
|
|
513
512
|
@pulumi.getter(name="externalOauthScopeMappingAttribute")
|
|
514
|
-
def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[
|
|
513
|
+
def external_oauth_scope_mapping_attribute(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
515
514
|
"""
|
|
516
515
|
Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
517
516
|
"""
|
|
518
517
|
return pulumi.get(self, "external_oauth_scope_mapping_attribute")
|
|
519
518
|
|
|
520
519
|
@external_oauth_scope_mapping_attribute.setter
|
|
521
|
-
def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[
|
|
520
|
+
def external_oauth_scope_mapping_attribute(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
522
521
|
pulumi.set(self, "external_oauth_scope_mapping_attribute", value)
|
|
523
522
|
|
|
524
|
-
@property
|
|
523
|
+
@_builtins.property
|
|
525
524
|
@pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
|
|
526
|
-
def external_oauth_snowflake_user_mapping_attribute(self) -> Optional[pulumi.Input[
|
|
525
|
+
def external_oauth_snowflake_user_mapping_attribute(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
527
526
|
"""
|
|
528
527
|
Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
529
528
|
"""
|
|
530
529
|
return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
|
|
531
530
|
|
|
532
531
|
@external_oauth_snowflake_user_mapping_attribute.setter
|
|
533
|
-
def external_oauth_snowflake_user_mapping_attribute(self, value: Optional[pulumi.Input[
|
|
532
|
+
def external_oauth_snowflake_user_mapping_attribute(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
534
533
|
pulumi.set(self, "external_oauth_snowflake_user_mapping_attribute", value)
|
|
535
534
|
|
|
536
|
-
@property
|
|
535
|
+
@_builtins.property
|
|
537
536
|
@pulumi.getter(name="externalOauthTokenUserMappingClaims")
|
|
538
|
-
def external_oauth_token_user_mapping_claims(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
537
|
+
def external_oauth_token_user_mapping_claims(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
539
538
|
"""
|
|
540
539
|
Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
541
540
|
"""
|
|
542
541
|
return pulumi.get(self, "external_oauth_token_user_mapping_claims")
|
|
543
542
|
|
|
544
543
|
@external_oauth_token_user_mapping_claims.setter
|
|
545
|
-
def external_oauth_token_user_mapping_claims(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
544
|
+
def external_oauth_token_user_mapping_claims(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
546
545
|
pulumi.set(self, "external_oauth_token_user_mapping_claims", value)
|
|
547
546
|
|
|
548
|
-
@property
|
|
547
|
+
@_builtins.property
|
|
549
548
|
@pulumi.getter(name="externalOauthType")
|
|
550
|
-
def external_oauth_type(self) -> Optional[pulumi.Input[
|
|
549
|
+
def external_oauth_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
551
550
|
"""
|
|
552
551
|
Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
553
552
|
"""
|
|
554
553
|
return pulumi.get(self, "external_oauth_type")
|
|
555
554
|
|
|
556
555
|
@external_oauth_type.setter
|
|
557
|
-
def external_oauth_type(self, value: Optional[pulumi.Input[
|
|
556
|
+
def external_oauth_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
558
557
|
pulumi.set(self, "external_oauth_type", value)
|
|
559
558
|
|
|
560
|
-
@property
|
|
559
|
+
@_builtins.property
|
|
561
560
|
@pulumi.getter(name="fullyQualifiedName")
|
|
562
|
-
def fully_qualified_name(self) -> Optional[pulumi.Input[
|
|
561
|
+
def fully_qualified_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
563
562
|
"""
|
|
564
563
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
565
564
|
"""
|
|
566
565
|
return pulumi.get(self, "fully_qualified_name")
|
|
567
566
|
|
|
568
567
|
@fully_qualified_name.setter
|
|
569
|
-
def fully_qualified_name(self, value: Optional[pulumi.Input[
|
|
568
|
+
def fully_qualified_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
570
569
|
pulumi.set(self, "fully_qualified_name", value)
|
|
571
570
|
|
|
572
|
-
@property
|
|
571
|
+
@_builtins.property
|
|
573
572
|
@pulumi.getter
|
|
574
|
-
def name(self) -> Optional[pulumi.Input[
|
|
573
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
575
574
|
"""
|
|
576
575
|
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
577
576
|
"""
|
|
578
577
|
return pulumi.get(self, "name")
|
|
579
578
|
|
|
580
579
|
@name.setter
|
|
581
|
-
def name(self, value: Optional[pulumi.Input[
|
|
580
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
582
581
|
pulumi.set(self, "name", value)
|
|
583
582
|
|
|
584
|
-
@property
|
|
583
|
+
@_builtins.property
|
|
585
584
|
@pulumi.getter(name="relatedParameters")
|
|
586
585
|
def related_parameters(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]]:
|
|
587
586
|
"""
|
|
@@ -593,7 +592,7 @@ class _ExternalOauthIntegrationState:
|
|
|
593
592
|
def related_parameters(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationRelatedParameterArgs']]]]):
|
|
594
593
|
pulumi.set(self, "related_parameters", value)
|
|
595
594
|
|
|
596
|
-
@property
|
|
595
|
+
@_builtins.property
|
|
597
596
|
@pulumi.getter(name="showOutputs")
|
|
598
597
|
def show_outputs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ExternalOauthIntegrationShowOutputArgs']]]]:
|
|
599
598
|
"""
|
|
@@ -612,22 +611,22 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
612
611
|
def __init__(__self__,
|
|
613
612
|
resource_name: str,
|
|
614
613
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
615
|
-
comment: Optional[pulumi.Input[
|
|
616
|
-
enabled: Optional[pulumi.Input[
|
|
617
|
-
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
618
|
-
external_oauth_any_role_mode: Optional[pulumi.Input[
|
|
619
|
-
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
620
|
-
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
621
|
-
external_oauth_issuer: Optional[pulumi.Input[
|
|
622
|
-
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
623
|
-
external_oauth_rsa_public_key: Optional[pulumi.Input[
|
|
624
|
-
external_oauth_rsa_public_key2: Optional[pulumi.Input[
|
|
625
|
-
external_oauth_scope_delimiter: Optional[pulumi.Input[
|
|
626
|
-
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[
|
|
627
|
-
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[
|
|
628
|
-
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
629
|
-
external_oauth_type: Optional[pulumi.Input[
|
|
630
|
-
name: Optional[pulumi.Input[
|
|
614
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
615
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
616
|
+
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
617
|
+
external_oauth_any_role_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
618
|
+
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
619
|
+
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
620
|
+
external_oauth_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
621
|
+
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
622
|
+
external_oauth_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
623
|
+
external_oauth_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
624
|
+
external_oauth_scope_delimiter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
625
|
+
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
626
|
+
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
627
|
+
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
628
|
+
external_oauth_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
629
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
631
630
|
__props__=None):
|
|
632
631
|
"""
|
|
633
632
|
## Import
|
|
@@ -638,22 +637,22 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
638
637
|
|
|
639
638
|
:param str resource_name: The name of the resource.
|
|
640
639
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
641
|
-
:param pulumi.Input[
|
|
642
|
-
:param pulumi.Input[
|
|
643
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
644
|
-
:param pulumi.Input[
|
|
645
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
646
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
647
|
-
:param pulumi.Input[
|
|
648
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
649
|
-
:param pulumi.Input[
|
|
650
|
-
:param pulumi.Input[
|
|
651
|
-
:param pulumi.Input[
|
|
652
|
-
:param pulumi.Input[
|
|
653
|
-
:param pulumi.Input[
|
|
654
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
655
|
-
:param pulumi.Input[
|
|
656
|
-
:param pulumi.Input[
|
|
640
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
641
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
|
|
642
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
643
|
+
:param pulumi.Input[_builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
644
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
645
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
646
|
+
:param pulumi.Input[_builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
|
|
647
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
648
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
649
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
650
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
|
|
651
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
652
|
+
:param pulumi.Input[_builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
653
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
654
|
+
:param pulumi.Input[_builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
655
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
657
656
|
"""
|
|
658
657
|
...
|
|
659
658
|
@overload
|
|
@@ -683,22 +682,22 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
683
682
|
def _internal_init(__self__,
|
|
684
683
|
resource_name: str,
|
|
685
684
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
686
|
-
comment: Optional[pulumi.Input[
|
|
687
|
-
enabled: Optional[pulumi.Input[
|
|
688
|
-
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
689
|
-
external_oauth_any_role_mode: Optional[pulumi.Input[
|
|
690
|
-
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
691
|
-
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
692
|
-
external_oauth_issuer: Optional[pulumi.Input[
|
|
693
|
-
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
694
|
-
external_oauth_rsa_public_key: Optional[pulumi.Input[
|
|
695
|
-
external_oauth_rsa_public_key2: Optional[pulumi.Input[
|
|
696
|
-
external_oauth_scope_delimiter: Optional[pulumi.Input[
|
|
697
|
-
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[
|
|
698
|
-
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[
|
|
699
|
-
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
700
|
-
external_oauth_type: Optional[pulumi.Input[
|
|
701
|
-
name: Optional[pulumi.Input[
|
|
685
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
686
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
687
|
+
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
688
|
+
external_oauth_any_role_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
689
|
+
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
690
|
+
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
691
|
+
external_oauth_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
692
|
+
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
693
|
+
external_oauth_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
694
|
+
external_oauth_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
695
|
+
external_oauth_scope_delimiter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
696
|
+
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
697
|
+
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
698
|
+
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
699
|
+
external_oauth_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
700
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
702
701
|
__props__=None):
|
|
703
702
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
704
703
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -748,24 +747,24 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
748
747
|
def get(resource_name: str,
|
|
749
748
|
id: pulumi.Input[str],
|
|
750
749
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
751
|
-
comment: Optional[pulumi.Input[
|
|
750
|
+
comment: Optional[pulumi.Input[_builtins.str]] = None,
|
|
752
751
|
describe_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationDescribeOutputArgs', 'ExternalOauthIntegrationDescribeOutputArgsDict']]]]] = None,
|
|
753
|
-
enabled: Optional[pulumi.Input[
|
|
754
|
-
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
755
|
-
external_oauth_any_role_mode: Optional[pulumi.Input[
|
|
756
|
-
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
757
|
-
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
758
|
-
external_oauth_issuer: Optional[pulumi.Input[
|
|
759
|
-
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
760
|
-
external_oauth_rsa_public_key: Optional[pulumi.Input[
|
|
761
|
-
external_oauth_rsa_public_key2: Optional[pulumi.Input[
|
|
762
|
-
external_oauth_scope_delimiter: Optional[pulumi.Input[
|
|
763
|
-
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[
|
|
764
|
-
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[
|
|
765
|
-
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
766
|
-
external_oauth_type: Optional[pulumi.Input[
|
|
767
|
-
fully_qualified_name: Optional[pulumi.Input[
|
|
768
|
-
name: Optional[pulumi.Input[
|
|
752
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
753
|
+
external_oauth_allowed_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
754
|
+
external_oauth_any_role_mode: Optional[pulumi.Input[_builtins.str]] = None,
|
|
755
|
+
external_oauth_audience_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
756
|
+
external_oauth_blocked_roles_lists: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
757
|
+
external_oauth_issuer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
758
|
+
external_oauth_jws_keys_urls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
759
|
+
external_oauth_rsa_public_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
760
|
+
external_oauth_rsa_public_key2: Optional[pulumi.Input[_builtins.str]] = None,
|
|
761
|
+
external_oauth_scope_delimiter: Optional[pulumi.Input[_builtins.str]] = None,
|
|
762
|
+
external_oauth_scope_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
763
|
+
external_oauth_snowflake_user_mapping_attribute: Optional[pulumi.Input[_builtins.str]] = None,
|
|
764
|
+
external_oauth_token_user_mapping_claims: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
765
|
+
external_oauth_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
766
|
+
fully_qualified_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
767
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
769
768
|
related_parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]]] = None,
|
|
770
769
|
show_outputs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationShowOutputArgs', 'ExternalOauthIntegrationShowOutputArgsDict']]]]] = None) -> 'ExternalOauthIntegration':
|
|
771
770
|
"""
|
|
@@ -775,24 +774,24 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
775
774
|
:param str resource_name: The unique name of the resulting resource.
|
|
776
775
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
777
776
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
778
|
-
:param pulumi.Input[
|
|
777
|
+
:param pulumi.Input[_builtins.str] comment: Specifies a comment for the OAuth integration.
|
|
779
778
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationDescribeOutputArgs', 'ExternalOauthIntegrationDescribeOutputArgsDict']]]] describe_outputs: Outputs the result of `DESCRIBE SECURITY INTEGRATIONS` for the given security integration.
|
|
780
|
-
:param pulumi.Input[
|
|
781
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
782
|
-
:param pulumi.Input[
|
|
783
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
784
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
785
|
-
:param pulumi.Input[
|
|
786
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
787
|
-
:param pulumi.Input[
|
|
788
|
-
:param pulumi.Input[
|
|
789
|
-
:param pulumi.Input[
|
|
790
|
-
:param pulumi.Input[
|
|
791
|
-
:param pulumi.Input[
|
|
792
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
793
|
-
:param pulumi.Input[
|
|
794
|
-
:param pulumi.Input[
|
|
795
|
-
:param pulumi.Input[
|
|
779
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether to initiate operation of the integration or suspend it.
|
|
780
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_allowed_roles_lists: Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
781
|
+
:param pulumi.Input[_builtins.str] external_oauth_any_role_mode: Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
782
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_audience_lists: Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
783
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_blocked_roles_lists: Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
784
|
+
:param pulumi.Input[_builtins.str] external_oauth_issuer: Specifies the URL to define the OAuth 2.0 authorization server.
|
|
785
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_jws_keys_urls: Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
786
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key: Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
787
|
+
:param pulumi.Input[_builtins.str] external_oauth_rsa_public_key2: Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
788
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_delimiter: Specifies the scope delimiter in the authorization token.
|
|
789
|
+
:param pulumi.Input[_builtins.str] external_oauth_scope_mapping_attribute: Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
790
|
+
:param pulumi.Input[_builtins.str] external_oauth_snowflake_user_mapping_attribute: Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
791
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] external_oauth_token_user_mapping_claims: Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
792
|
+
:param pulumi.Input[_builtins.str] external_oauth_type: Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
793
|
+
:param pulumi.Input[_builtins.str] fully_qualified_name: Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
794
|
+
:param pulumi.Input[_builtins.str] name: Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
796
795
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationRelatedParameterArgs', 'ExternalOauthIntegrationRelatedParameterArgsDict']]]] related_parameters: Parameters related to this security integration.
|
|
797
796
|
:param pulumi.Input[Sequence[pulumi.Input[Union['ExternalOauthIntegrationShowOutputArgs', 'ExternalOauthIntegrationShowOutputArgsDict']]]] show_outputs: Outputs the result of `SHOW SECURITY INTEGRATIONS` for the given security integration.
|
|
798
797
|
"""
|
|
@@ -822,15 +821,15 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
822
821
|
__props__.__dict__["show_outputs"] = show_outputs
|
|
823
822
|
return ExternalOauthIntegration(resource_name, opts=opts, __props__=__props__)
|
|
824
823
|
|
|
825
|
-
@property
|
|
824
|
+
@_builtins.property
|
|
826
825
|
@pulumi.getter
|
|
827
|
-
def comment(self) -> pulumi.Output[Optional[
|
|
826
|
+
def comment(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
828
827
|
"""
|
|
829
828
|
Specifies a comment for the OAuth integration.
|
|
830
829
|
"""
|
|
831
830
|
return pulumi.get(self, "comment")
|
|
832
831
|
|
|
833
|
-
@property
|
|
832
|
+
@_builtins.property
|
|
834
833
|
@pulumi.getter(name="describeOutputs")
|
|
835
834
|
def describe_outputs(self) -> pulumi.Output[Sequence['outputs.ExternalOauthIntegrationDescribeOutput']]:
|
|
836
835
|
"""
|
|
@@ -838,135 +837,135 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
838
837
|
"""
|
|
839
838
|
return pulumi.get(self, "describe_outputs")
|
|
840
839
|
|
|
841
|
-
@property
|
|
840
|
+
@_builtins.property
|
|
842
841
|
@pulumi.getter
|
|
843
|
-
def enabled(self) -> pulumi.Output[
|
|
842
|
+
def enabled(self) -> pulumi.Output[_builtins.bool]:
|
|
844
843
|
"""
|
|
845
844
|
Specifies whether to initiate operation of the integration or suspend it.
|
|
846
845
|
"""
|
|
847
846
|
return pulumi.get(self, "enabled")
|
|
848
847
|
|
|
849
|
-
@property
|
|
848
|
+
@_builtins.property
|
|
850
849
|
@pulumi.getter(name="externalOauthAllowedRolesLists")
|
|
851
|
-
def external_oauth_allowed_roles_lists(self) -> pulumi.Output[Optional[Sequence[
|
|
850
|
+
def external_oauth_allowed_roles_lists(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
852
851
|
"""
|
|
853
852
|
Specifies the list of roles that the client can set as the primary role. For more information about this resource, see docs.
|
|
854
853
|
"""
|
|
855
854
|
return pulumi.get(self, "external_oauth_allowed_roles_lists")
|
|
856
855
|
|
|
857
|
-
@property
|
|
856
|
+
@_builtins.property
|
|
858
857
|
@pulumi.getter(name="externalOauthAnyRoleMode")
|
|
859
|
-
def external_oauth_any_role_mode(self) -> pulumi.Output[Optional[
|
|
858
|
+
def external_oauth_any_role_mode(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
860
859
|
"""
|
|
861
860
|
Specifies whether the OAuth client or user can use a role that is not defined in the OAuth access token. Valid values are (case-insensitive): `DISABLE` | `ENABLE` | `ENABLE_FOR_PRIVILEGE`.
|
|
862
861
|
"""
|
|
863
862
|
return pulumi.get(self, "external_oauth_any_role_mode")
|
|
864
863
|
|
|
865
|
-
@property
|
|
864
|
+
@_builtins.property
|
|
866
865
|
@pulumi.getter(name="externalOauthAudienceLists")
|
|
867
|
-
def external_oauth_audience_lists(self) -> pulumi.Output[Optional[Sequence[
|
|
866
|
+
def external_oauth_audience_lists(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
868
867
|
"""
|
|
869
868
|
Specifies additional values that can be used for the access token's audience validation on top of using the Customer's Snowflake Account URL
|
|
870
869
|
"""
|
|
871
870
|
return pulumi.get(self, "external_oauth_audience_lists")
|
|
872
871
|
|
|
873
|
-
@property
|
|
872
|
+
@_builtins.property
|
|
874
873
|
@pulumi.getter(name="externalOauthBlockedRolesLists")
|
|
875
|
-
def external_oauth_blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[
|
|
874
|
+
def external_oauth_blocked_roles_lists(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
876
875
|
"""
|
|
877
876
|
Specifies the list of roles that a client cannot set as the primary role. By default, this list includes the ACCOUNTADMIN, ORGADMIN and SECURITYADMIN roles. To remove these privileged roles from the list, use the ALTER ACCOUNT command to set the EXTERNAL*OAUTH*ADD*PRIVILEGED*ROLES*TO*BLOCKED*LIST account parameter to FALSE. For more information about this resource, see docs.
|
|
878
877
|
"""
|
|
879
878
|
return pulumi.get(self, "external_oauth_blocked_roles_lists")
|
|
880
879
|
|
|
881
|
-
@property
|
|
880
|
+
@_builtins.property
|
|
882
881
|
@pulumi.getter(name="externalOauthIssuer")
|
|
883
|
-
def external_oauth_issuer(self) -> pulumi.Output[
|
|
882
|
+
def external_oauth_issuer(self) -> pulumi.Output[_builtins.str]:
|
|
884
883
|
"""
|
|
885
884
|
Specifies the URL to define the OAuth 2.0 authorization server.
|
|
886
885
|
"""
|
|
887
886
|
return pulumi.get(self, "external_oauth_issuer")
|
|
888
887
|
|
|
889
|
-
@property
|
|
888
|
+
@_builtins.property
|
|
890
889
|
@pulumi.getter(name="externalOauthJwsKeysUrls")
|
|
891
|
-
def external_oauth_jws_keys_urls(self) -> pulumi.Output[Optional[Sequence[
|
|
890
|
+
def external_oauth_jws_keys_urls(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
892
891
|
"""
|
|
893
892
|
Specifies the endpoint or a list of endpoints from which to download public keys or certificates to validate an External OAuth access token. The maximum number of URLs that can be specified in the list is 3. If removed from the config, the resource is recreated.
|
|
894
893
|
"""
|
|
895
894
|
return pulumi.get(self, "external_oauth_jws_keys_urls")
|
|
896
895
|
|
|
897
|
-
@property
|
|
896
|
+
@_builtins.property
|
|
898
897
|
@pulumi.getter(name="externalOauthRsaPublicKey")
|
|
899
|
-
def external_oauth_rsa_public_key(self) -> pulumi.Output[Optional[
|
|
898
|
+
def external_oauth_rsa_public_key(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
900
899
|
"""
|
|
901
900
|
Specifies a Base64-encoded RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. If removed from the config, the resource is recreated.
|
|
902
901
|
"""
|
|
903
902
|
return pulumi.get(self, "external_oauth_rsa_public_key")
|
|
904
903
|
|
|
905
|
-
@property
|
|
904
|
+
@_builtins.property
|
|
906
905
|
@pulumi.getter(name="externalOauthRsaPublicKey2")
|
|
907
|
-
def external_oauth_rsa_public_key2(self) -> pulumi.Output[Optional[
|
|
906
|
+
def external_oauth_rsa_public_key2(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
908
907
|
"""
|
|
909
908
|
Specifies a second RSA public key, without the -----BEGIN PUBLIC KEY----- and -----END PUBLIC KEY----- headers. Used for key rotation. If removed from the config, the resource is recreated.
|
|
910
909
|
"""
|
|
911
910
|
return pulumi.get(self, "external_oauth_rsa_public_key2")
|
|
912
911
|
|
|
913
|
-
@property
|
|
912
|
+
@_builtins.property
|
|
914
913
|
@pulumi.getter(name="externalOauthScopeDelimiter")
|
|
915
|
-
def external_oauth_scope_delimiter(self) -> pulumi.Output[Optional[
|
|
914
|
+
def external_oauth_scope_delimiter(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
916
915
|
"""
|
|
917
916
|
Specifies the scope delimiter in the authorization token.
|
|
918
917
|
"""
|
|
919
918
|
return pulumi.get(self, "external_oauth_scope_delimiter")
|
|
920
919
|
|
|
921
|
-
@property
|
|
920
|
+
@_builtins.property
|
|
922
921
|
@pulumi.getter(name="externalOauthScopeMappingAttribute")
|
|
923
|
-
def external_oauth_scope_mapping_attribute(self) -> pulumi.Output[Optional[
|
|
922
|
+
def external_oauth_scope_mapping_attribute(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
924
923
|
"""
|
|
925
924
|
Specifies the access token claim to map the access token to an account role. If removed from the config, the resource is recreated.
|
|
926
925
|
"""
|
|
927
926
|
return pulumi.get(self, "external_oauth_scope_mapping_attribute")
|
|
928
927
|
|
|
929
|
-
@property
|
|
928
|
+
@_builtins.property
|
|
930
929
|
@pulumi.getter(name="externalOauthSnowflakeUserMappingAttribute")
|
|
931
|
-
def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Output[
|
|
930
|
+
def external_oauth_snowflake_user_mapping_attribute(self) -> pulumi.Output[_builtins.str]:
|
|
932
931
|
"""
|
|
933
932
|
Indicates which Snowflake user record attribute should be used to map the access token to a Snowflake user record. Valid values are (case-insensitive): `LOGIN_NAME` | `EMAIL_ADDRESS`.
|
|
934
933
|
"""
|
|
935
934
|
return pulumi.get(self, "external_oauth_snowflake_user_mapping_attribute")
|
|
936
935
|
|
|
937
|
-
@property
|
|
936
|
+
@_builtins.property
|
|
938
937
|
@pulumi.getter(name="externalOauthTokenUserMappingClaims")
|
|
939
|
-
def external_oauth_token_user_mapping_claims(self) -> pulumi.Output[Sequence[
|
|
938
|
+
def external_oauth_token_user_mapping_claims(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
940
939
|
"""
|
|
941
940
|
Specifies the access token claim or claims that can be used to map the access token to a Snowflake user record. If removed from the config, the resource is recreated.
|
|
942
941
|
"""
|
|
943
942
|
return pulumi.get(self, "external_oauth_token_user_mapping_claims")
|
|
944
943
|
|
|
945
|
-
@property
|
|
944
|
+
@_builtins.property
|
|
946
945
|
@pulumi.getter(name="externalOauthType")
|
|
947
|
-
def external_oauth_type(self) -> pulumi.Output[
|
|
946
|
+
def external_oauth_type(self) -> pulumi.Output[_builtins.str]:
|
|
948
947
|
"""
|
|
949
948
|
Specifies the OAuth 2.0 authorization server to be Okta, Microsoft Azure AD, Ping Identity PingFederate, or a Custom OAuth 2.0 authorization server. Valid values are (case-insensitive): `OKTA` | `AZURE` | `PING_FEDERATE` | `CUSTOM`.
|
|
950
949
|
"""
|
|
951
950
|
return pulumi.get(self, "external_oauth_type")
|
|
952
951
|
|
|
953
|
-
@property
|
|
952
|
+
@_builtins.property
|
|
954
953
|
@pulumi.getter(name="fullyQualifiedName")
|
|
955
|
-
def fully_qualified_name(self) -> pulumi.Output[
|
|
954
|
+
def fully_qualified_name(self) -> pulumi.Output[_builtins.str]:
|
|
956
955
|
"""
|
|
957
956
|
Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
|
|
958
957
|
"""
|
|
959
958
|
return pulumi.get(self, "fully_qualified_name")
|
|
960
959
|
|
|
961
|
-
@property
|
|
960
|
+
@_builtins.property
|
|
962
961
|
@pulumi.getter
|
|
963
|
-
def name(self) -> pulumi.Output[
|
|
962
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
964
963
|
"""
|
|
965
964
|
Specifies the name of the External Oath integration. This name follows the rules for Object Identifiers. The name should be unique among security integrations in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
|
|
966
965
|
"""
|
|
967
966
|
return pulumi.get(self, "name")
|
|
968
967
|
|
|
969
|
-
@property
|
|
968
|
+
@_builtins.property
|
|
970
969
|
@pulumi.getter(name="relatedParameters")
|
|
971
970
|
def related_parameters(self) -> pulumi.Output[Sequence['outputs.ExternalOauthIntegrationRelatedParameter']]:
|
|
972
971
|
"""
|
|
@@ -974,7 +973,7 @@ class ExternalOauthIntegration(pulumi.CustomResource):
|
|
|
974
973
|
"""
|
|
975
974
|
return pulumi.get(self, "related_parameters")
|
|
976
975
|
|
|
977
|
-
@property
|
|
976
|
+
@_builtins.property
|
|
978
977
|
@pulumi.getter(name="showOutputs")
|
|
979
978
|
def show_outputs(self) -> pulumi.Output[Sequence['outputs.ExternalOauthIntegrationShowOutput']]:
|
|
980
979
|
"""
|